Santandersecurityresearch/DrHeader

Enable Dependabot security scanning

Closed this issue · 1 comments

  • drHEADer version:
  • Python version:
  • Operating System:

Description

To keep ahead of security issues with dependencies we can use dependabot.

https://help.github.com/en/articles/configuring-automated-security-fixes

There are several options to enable and we might have to introduce an insecure dependency to check it.

Enabled the security scannign configs via the security tab
created pull request #34 to add a bad dependency
observed automated PR in response #35
removed dependency again in #36